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IN THE SPECIFICATION 

Please amend the paragraph starting on Page 16, Line 9 of the application as follows: 

According to another advantageous embodiment of the present invention, the secure 
domain is attached to the USB, external to the Host, and appears to the USB as a Hub or a 
composite device. This embodiment comprises a USB bus, a memory attached to the USB bus 
for storing each data packet sent from, or received in, the secure domain, in which the memory 
contains a set of buffers, and in which each of the buffers contains data associated with the Host 
or with the device. Circuitry attached to the USB bus acting as [[an]] a USB node is utilized to 
forward commands and/or requests for information received in the secure domain and addressed 
to the devices within the secure domain. A processor is also attached to the USB bus for 
classifying data packets and for controlling forwarding and/or encrypting operations. A USB 
Host controller attached to the USB bus is utilized for managing data flow between the Host and 
the USB devices within the secure domain. 
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Please amend the paragraph starting on Page 24, Line 7 of the application as follows: 

USB Host Controller 303 carries out all the USB tasks required for Lower USB Tree 304 
transactions, as if USB Host Controller 303 were the USB root Hub of a Host. Communication 
flow that originates at Lower USB Tree 304 is performed through pipes that originate at the 
devices of Lower USB Tree 304 and terminate in memory buffers in memory device 302 of USB 
Bridge 300. USB Bridge Processor 301 carries out the rest of the communication tasks and 
actually enables secure transactions to take place. In order to filter and block off particular 
Endpoint data, USB Bridge Processor 301 is required to determine how to handle each of the 
received packets. 
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Please amend the paragraph starting on Page 31, Line 21 of the application as follows: 

In the alternative embodiment shown in FIGURE 3b, all USB devices reside in secure 
domain 330. Additionally, non-USB devices may be accessed utilizing secure domain 330 while 
maintaining the USB style software interface. This provides a low cost and flexible 
implementation. Since no additional USB hardware is required, this embodiment is considered to 
be a very advantageous embodiment of the invention. A USB Node controller of the type used in 
USB Bridge 300 is not r e quired is not required in this alternate embodiment. In addition, the 
implementation of USB Host Controller 334 can largely be accomplished in firmware. This 
means that the tradeoff between the performance of the solution and the amount of dedicated 
hardware support required will be determined only by the application requirements. 
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